请大家注意：有人伪造admin@domain.cn发送钓鱼垃圾邮件

叶旭建 · 发表于 2019-5-6 11:18

请大家注意：有人伪造admin@domain.cn发送钓鱼垃圾邮件，务必注意防范与识别。

伪造邮件截图与内容如下：

登录/注册后可看大图

伪造的邮件内容.png (50.16 KB, 下载次数: 0)

下载附件保存到相册

2019-5-6 11:17 上传

登录/注册后可看大图

伪造的邮件内容截图.png (58.9 KB, 下载次数: 0)

下载附件保存到相册

2019-5-6 11:17 上传

Return-path: <admin@domain.cn>
Received: from mail1.awz-sg.ch ([80.248.192.196]:5306)
by baz**.mschosting.com with esmtps (TLSv1.2

HE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91)
(envelope-from <admin@domain.cn>)
id 1hNTdE-00Bt7a-5A
for customerservice@soaceramics.com; Mon, 06 May 2019 10:45:42 +0800
Message-ID: <67992070-4900@mail1.awz-sg.ch>
Received: from mail.thaper.co.uk ([212.159.95.225])
(authenticated user heineken@awz-sg.ch)
by mail1.awz-sg.ch (Kerio Connect 8.2.2)
for customerservice@soaceramics.com;
Mon, 6 May 2019 04:18:43 +0200
From: "ADMIN" <admin@domain.cn>
To: "customerservice" <customerservice@soaceramics.com>
Content-Type: multipart/alternative; boundary="eBcuarA26ldaX=_FkWiXX1UsFInTJPXzml"
MIME-Version: 1.0
Reply-To: "d0_not_reply@domain.cn" <d0_not_reply@domain.cn>
Date: Mon, 6 May 2019 03:18:39 +0100
X-Spam-Status: Yes, score=6.2
X-Spam-Score: 62
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "baz**.mschosting.com",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
root\@localhost for details.

Content preview:  锘?锘?

Content analysis details: (6.2 points, 5.0 required)

  pts rule name             description
---- ---------------------- --------------------------------------------------
  2.5 URIBL_DBL_MALWARE    Contains a malware URL listed in the Spamhaus
                           DBL blocklist
                           [URIs: qevrovqro.uk]
  0.1 URIBL_SBL_A          Contains URL's A record listed in the Spamhaus SBL
                           blocklist
                           [URIs: qevrovqro.uk]
  0.1 URIBL_CSS_A          Contains URL's A record listed in the Spamhaus CSS
                           blocklist
                           [URIs: qevrovqro.uk]
  0.1 URIBL_CSS             Contains an URL's NS IP listed in the Spamhaus CSS
                           blocklist
                           [URIs: qevrovqro.uk]
  0.6 URIBL_SBL             Contains an URL's NS IP listed in the Spamhaus SBL
                           blocklist
                           [URIs: qevrovqro.uk]
  1.5 SPF_SOFTFAIL          SPF: sender does not match SPF record (softfail)
  0.3 HTML_IMAGE_ONLY_04    BODY: HTML: images with 0-400 bytes of words
  0.7 MPART_ALT_DIFF       BODY: HTML and text parts are different
  0.0 HTML_MESSAGE          BODY: HTML included in message
  0.0 MSGID_FROM_MTA_HEADER  Message-Id was added by a relay
  0.1 HTML_SHORT_LINK_IMG_1  HTML is very short with a linked image
  0.0 T_REMOTE_IMAGE       Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?B?5Zue5aSN77ya5pyA57uI6K2m5ZGK?=

hongchao186 · 发表于 2019-5-6 11:19

谢谢城主提醒！

rares · 发表于 2019-5-6 11:25

谢谢城主提醒！

cntvx · 发表于 2019-5-6 11:26

谢谢提醒

一米发 · 发表于 2019-5-6 11:33

金牌域名 · 发表于 2019-5-6 12:35

自由 · 发表于 2019-5-6 12:46

谢谢城主提醒

20659251 · 发表于 2019-5-6 12:55

碰瓷域名城啊

淘米宝 · 发表于 2019-5-6 12:55

谢谢城主提醒

20474116 · 发表于 2019-5-6 13:27

可恶啊

xunteng · 发表于 2019-5-6 14:26

谢谢提醒

姚亚卓 · 发表于 2019-5-6 15:56

谢谢提醒

邓振华 · 发表于 2019-5-6 16:58

那怎么辨别真假，城主没说明

小米科技 · 发表于 2019-5-6 20:26

多谢城主提醒，这种诈骗邮件真实猖狂啊。敢冒充域名城

区块链 · 发表于 2019-5-6 22:18

真可恶

抢注网客服 · 发表于 2019-5-7 07:23

yishiwucheng · 发表于 2019-5-7 07:48

感谢提醒

20296126 · 发表于 2019-5-7 10:59

最近经常受到此类邮件